At a glance
Bank account compromise can affect your bank, finance and online payment accounts.
Cybercriminals can use a compromised account to access or steal your money. If you think your account is compromised, contact your bank, financial institution or payment provider immediately. You should also change your password and report the incident to us.
Emergency help: If there is an immediate threat to life or risk of harm, call 000.
Bank account compromise explained
Bank account compromise is when someone gets unauthorised access to your bank, finance or online payment account. This can result in stolen funds.
Learn more about different types of account compromise.
Signs you may be affected
You may be experiencing bank account compromise if you:
- can’t log in to your account, even though the username and password are correct
- have been automatically logged out of your account on all devices
- receive unexpected password reset notifications
- notice login times or locations that you don’t recognise
- find payment transactions you don’t recognise or didn’t make
- receive an alert about suspicious account activity
- have declined transactions when you know there is enough money in your account.
If this is happening now
You can reduce harm by taking immediate action.
Contact your account provider
Follow their advice to secure your account and freeze any affected cards or accounts.
Online payment accounts are often linked to a bank account or credit card. Online payment accounts include PayPal, AfterPay and Apple Pay. If you think your account is compromised, contact both the payment provider and the bank linked to your account.
If you’re not satisfied with their response, you can get free help from the Australian Financial Complaints Authority.
Change your password
It’s important to change your password immediately if you think your account is compromised.
When changing your password, use an official bank website or app. Avoid using links in emails or messages. Cybercriminals can use fake password reset links to steal further funds. Contact your bank if you need help changing your password.
Use strong, unique passwords and a trusted password manager. Learn how to create strong passwords and use password managers.
Be alert for scams
If you’ve lost money, don’t trust third parties that offer to recover it for you. This is a common tactic used by scammers to steal more money from you.
What to do next
Take these extra steps to reduce the impacts of bank account compromise.
Secure your other accounts
Check your other accounts for suspicious activity. Start with the most important ones, like your email account.
Use strong, unique passwords for each of your accounts. Learn more in our personal cyber security handbook.
Secure your devices
If you're unsure how your account was compromised, check your device for malware. Cybercriminals can use malware to steal your login details.
Learn more about malware and how to recover.
How to get help and report
It’s important to record what happened and report the incident to the appropriate authorities.
Try to record as much as possible, including:
- what happened
- when it happened
- how you think the compromise occurred
- what steps you took to secure your account after the incident (such as changing your password).
Report the incident details:
- to us and the relevant police jurisdiction through ReportCyber
- to ScamWatch if the compromise is a result of a scam
- to your bank or financial institution if you haven’t already contacted them.
We understand how distressing incidents like this can be. If you want to talk to someone, call our hotline on 1300 CYBER1 (1300 292 371). We’re available 24 hours a day, 7 days a week.
Stay protected
Learn more about how to stay protected through our personal cyber security handbook.
More support
The Australian Cyber Security Centre has a 24/7 Hotline: 1300 CYBER1 (1300 292 371).
Call now if you need additional support, and in the meantime, keep calm and read this guide. It steps you through what you can do right now to limit the damage.